mirror of
https://github.com/laurent22/joplin.git
synced 2024-12-24 10:27:10 +02:00
100 lines
3.2 KiB
JavaScript
100 lines
3.2 KiB
JavaScript
const fs = require('fs');
|
|
const path = require('path');
|
|
const electron_notarize = require('electron-notarize');
|
|
|
|
function execCommand(command) {
|
|
const exec = require('child_process').exec;
|
|
|
|
return new Promise((resolve, reject) => {
|
|
exec(command, (error, stdout, stderr) => {
|
|
if (error) {
|
|
if (error.signal === 'SIGTERM') {
|
|
resolve('Process was killed');
|
|
} else {
|
|
reject(new Error([stdout.trim(), stderr.trim()].join('\n')));
|
|
}
|
|
} else {
|
|
resolve([stdout.trim(), stderr.trim()].join('\n'));
|
|
}
|
|
});
|
|
});
|
|
}
|
|
|
|
function isDesktopAppTag(tagName) {
|
|
if (!tagName) return false;
|
|
return tagName[0] === 'v';
|
|
}
|
|
|
|
module.exports = async function(params) {
|
|
if (process.platform !== 'darwin') return;
|
|
|
|
console.info('Checking if notarization should be done...');
|
|
|
|
if (!process.env.IS_CONTINUOUS_INTEGRATION || !isDesktopAppTag(process.env.GIT_TAG_NAME)) {
|
|
console.info(`Either not running in CI or not processing a desktop app tag - skipping notarization. process.env.IS_CONTINUOUS_INTEGRATION = ${process.env.IS_CONTINUOUS_INTEGRATION}; process.env.GIT_TAG_NAME = ${process.env.GIT_TAG_NAME}`);
|
|
return;
|
|
}
|
|
|
|
if (!process.env.APPLE_ID || !process.env.APPLE_ID_PASSWORD) {
|
|
console.warn('Environment variables APPLE_ID and APPLE_ID_PASSWORD not found - notarization will NOT be done.');
|
|
return;
|
|
}
|
|
|
|
// Same appId in electron-builder.
|
|
const appId = 'net.cozic.joplin-desktop';
|
|
|
|
const appPath = path.join(params.appOutDir, `${params.packager.appInfo.productFilename}.app`);
|
|
if (!fs.existsSync(appPath)) {
|
|
throw new Error(`Cannot find application at: ${appPath}`);
|
|
}
|
|
|
|
console.log(`Notarizing ${appId} found at ${appPath}`);
|
|
|
|
// Every x seconds we print something to stdout, otherwise CI may timeout
|
|
// the task after 10 minutes, and Apple notarization can take more time.
|
|
const waitingIntervalId = setInterval(() => {
|
|
console.log('.');
|
|
}, 60000);
|
|
|
|
try {
|
|
await electron_notarize.notarize({
|
|
appBundleId: appId,
|
|
appPath: appPath,
|
|
|
|
// Apple Developer email address
|
|
appleId: process.env.APPLE_ID,
|
|
|
|
// App-specific password: https://support.apple.com/en-us/HT204397
|
|
appleIdPassword: process.env.APPLE_ID_PASSWORD,
|
|
|
|
// When Apple ID is attached to multiple providers (eg if the
|
|
// account has been used to build multiple apps for different
|
|
// companies), in that case the provider "Team Short Name" (also
|
|
// known as "ProviderShortname") must be provided.
|
|
//
|
|
// Use this to get it:
|
|
//
|
|
// xcrun altool --list-providers -u APPLE_ID -p APPLE_ID_PASSWORD
|
|
ascProvider: process.env.APPLE_ASC_PROVIDER,
|
|
});
|
|
} catch (error) {
|
|
console.error(error);
|
|
process.exit(1);
|
|
}
|
|
|
|
clearInterval(waitingIntervalId);
|
|
|
|
// It appears that electron-notarize doesn't staple the app, but without
|
|
// this we were still getting the malware warning when launching the app.
|
|
// Stapling the app means attaching the notarization ticket to it, so that
|
|
// if the user is offline, macOS can still check if the app was notarized.
|
|
// So it seems to be more or less optional, but at least in our case it
|
|
// wasn't.
|
|
console.log('Staple notarization ticket to the app...');
|
|
const staplerCmd = `xcrun stapler staple "${appPath}"`;
|
|
console.log(`> ${staplerCmd}`);
|
|
console.log(await execCommand(staplerCmd));
|
|
|
|
console.log(`Done notarizing ${appId}`);
|
|
};
|